[Freeipa-devel] [freeipa PR#607][opened] Backup ipa-specific httpd unit-file

Discussion:

stlaz

2017-03-16 09:34:58 UTC

URL: https://github.com/freeipa/freeipa/pull/607
Author: stlaz
Title: #607: Backup ipa-specific httpd unit-file
Action: opened

PR body:
"""
On backup-restore, the ipa unit file for httpd was not backed up.
This file however contains setting for httpd to communicate with
gssproxy so not backing it up will result in httpd not knowing
how to get credentials.

https://pagure.io/freeipa/issue/6748
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/607/head:pr607
git checkout pr607

tiran

2017-03-16 09:57:57 UTC

Permalink

URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

tiran commented:
"""
LGTM

Did you check if there are more files missing after backup, uninstall, restore? You could use ```find /etc /usr /var >before_uninstall``` before uninstall and after restore, then compare the files with diff.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/607#issuecomment-287009174

stlaz

2017-03-16 11:24:44 UTC

Permalink

URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

stlaz commented:
"""
Thanks, @tiran, this is a good idea, I noticed also KDCProxy conf symlink was missing.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/607#issuecomment-287029314

stlaz

2017-03-16 11:26:45 UTC

Permalink

URL: https://github.com/freeipa/freeipa/pull/607
Author: stlaz
Title: #607: Backup ipa-specific httpd unit-file
Action: synchronized

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/607/head:pr607
git checkout pr607

tiran

2017-03-16 11:27:25 UTC

Permalink

URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

tiran commented:
"""
The symlink is generated by a script when httpd is started.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/607#issuecomment-287029814

stlaz

2017-03-16 11:41:55 UTC

Permalink

stlaz

2017-03-16 11:42:13 UTC

Permalink

URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

stlaz commented:
"""
Ah, right.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/607#issuecomment-287032822

stlaz

2017-03-16 15:22:19 UTC

Permalink

URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

stlaz commented:
"""
We need to perform `paths.SYSTEMCTL --system daemon-reload` here as well.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/607#issuecomment-287091722

stlaz

2017-03-16 15:30:49 UTC

Permalink

MartinBasti

2017-03-22 15:47:43 UTC

Permalink

URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

MartinBasti commented:
"""
After restore I cannot connect to webUI

```
[Wed Mar 22 16:43:48.779900 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] mod_wsgi (pid=100377): Exception occurred processing WSGI script '/usr/share/ipa/wsgi.py'.
[Wed Mar 22 16:43:48.780002 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] Traceback (most recent call last):
[Wed Mar 22 16:43:48.780059 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] File "/usr/share/ipa/wsgi.py", line 51, in application
[Wed Mar 22 16:43:48.780592 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] return api.Backend.wsgi_dispatch(environ, start_response)
[Wed Mar 22 16:43:48.780618 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 262, in __call__
[Wed Mar 22 16:43:48.781029 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] return self.route(environ, start_response)
[Wed Mar 22 16:43:48.781050 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 274, in route
[Wed Mar 22 16:43:48.781086 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] return app(environ, start_response)
[Wed Mar 22 16:43:48.781110 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 913, in __call__
[Wed Mar 22 16:43:48.781146 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] self.kinit(user_principal, password, ipa_ccache_name)
[Wed Mar 22 16:43:48.781162 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 947, in kinit
[Wed Mar 22 16:43:48.781180 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] kinit_armor(armor_path)
[Wed Mar 22 16:43:48.781215 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] File "/usr/lib/python2.7/site-packages/ipalib/install/kinit.py", line 125, in kinit_armor
[Wed Mar 22 16:43:48.781306 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] run(args, env=env, raiseonerr=True, capture_error=True)
[Wed Mar 22 16:43:48.781331 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] File "/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 495, in run
[Wed Mar 22 16:43:48.781788 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] raise CalledProcessError(p.returncode, arg_string, str(output))
[Wed Mar 22 16:43:48.781873 2017] [wsgi:error] [pid 100377] [remote 2620:52:0:2280:206a:7885:fe7b:1356:184] CalledProcessError: Command '/usr/bin/kinit -n -c /var/run/ipa/ccaches/armor_100377' returned non-zero exit status 1

```

KDc log
```
Mar 22 16:43:48 vm-126.abc.idm.lab.eng.brq.redhat.com krb5kdc[100354](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 10.34.78.126: ISSUE: authtime 1490197428, etypes {rep=18 tkt=18 ses=18}, WELLKNOWN/***@ABC.IDM.LAB.ENG.BRQ.REDHAT.COM for krbtgt/***@ABC.IDM.LAB.ENG.BRQ.REDHAT.COM
Mar 22 16:43:48 vm-126.abc.idm.lab.eng.brq.redhat.com krb5kdc[100354](info): closing down fd 11
Mar 22 16:43:48 vm-126.abc.idm.lab.eng.brq.redhat.com krb5kdc[100357](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 10.34.78.126: NEEDED_PREAUTH: WELLKNOWN/***@ABC.IDM.LAB.ENG.BRQ.REDHAT.COM for krbtgt/***@ABC.IDM.LAB.ENG.BRQ.REDHAT.COM, Additional pre-authentication required
Mar 22 16:43:48 vm-126.abc.idm.lab.eng.brq.redhat.com krb5kdc[100357](info): closing down fd 11

```
"""

See the full comment at https://github.com/freeipa/freeipa/pull/607#issuecomment-288442807

MartinBasti

2017-03-22 15:49:22 UTC

Permalink

URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

MartinBasti commented:
"""
However it fixed issue listed in ticket, so this can resolved in separate PR.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/607#issuecomment-288443377

MartinBasti

2017-03-22 15:49:28 UTC

Permalink

URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

Label: +ack

tomaskrizek

2017-03-23 09:14:02 UTC

Permalink

URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

tomaskrizek commented:
"""
master:

* 2612c092dd797c9c8f772c785aae1f152f06847d Backup ipa-specific httpd unit-file
ipa-4-5:

* 59342a7f6fffe2aaf0b8ce4e10bb41444d8fa25f Backup ipa-specific httpd unit-file
"""

See the full comment at https://github.com/freeipa/freeipa/pull/607#issuecomment-288659254

tomaskrizek

2017-03-23 09:14:06 UTC

Permalink

URL: https://github.com/freeipa/freeipa/pull/607
Title: #607: Backup ipa-specific httpd unit-file

Label: +pushed

tomaskrizek

2017-03-23 09:14:09 UTC

Permalink

URL: https://github.com/freeipa/freeipa/pull/607
Author: stlaz
Title: #607: Backup ipa-specific httpd unit-file
Action: closed

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/607/head:pr607
git checkout pr607